ice-wzl·1 day ago5 Ways to Backdoor a Windows SystemIntroduction: As a red team operator, it is crucial to continually explore advanced techniques to effectively simulate real-world threats during authorized penetration tests. Backdooring Windows systems provides a powerful avenue for unauthorized access and control. In this reference manual, we will explore five advanced ways to backdoor a Windows system, equipping…Windows4 min readWindows4 min read
Joris Ros·14 hours agoInstall Pimcore 11 on WindowsI have created a manual how to install/use Pimcore in Windows in combination with Chocolatery (package manager). This is an alternative method to run Pimcore 11 Community edition on Windows. I try to make it easy as possible. It does not make use of any virtualisation platform it run directly on…Windows4 min readWindows4 min read
JAGZ·8 hours agoRogue Libraries: Malicious Links that Live on Your Desktop“Phishing” has become a household term. And for good reason too: Well over half of all cyberattacks start with a successful phishing campaign. The email attack vector is ubiquitous with a phishing attempt but there are many other ways to execute a deceptive manipulation of the target. One particularly lethal…Windows6 min readWindows6 min read
GhouLSec·12 hours ago[Mal Series #25] The spawn of conhost.exeWhen I was playing with some red teaming toolkit, found out conhost.exe 0xffffffff -ForceV1 process is quite interesting. Therefore, this blog will explain why this happened based on my understanding. Based on the Mandiant blog, conhost.exe is related with windows console host which is responsible in handling console input thread…Windows3 min readWindows3 min read
PITS Global Data Recovery Services·1 day agoWhat is Blue Screen of Death on Windows?Have you ever encountered the infamous “Blue Screen of Death” (BSOD) on your computer? If so, you’re not alone. The Blue Screen of Death is an error screen displayed by Microsoft Windows when it encounters a critical system error that it cannot recover from. In this blog post, we will…Windows4 min readWindows4 min read
Shlomi Boutnaru·8 hours agoThe Windows Process Journey — cmd.exe (Windows Command Processor)“cmd.exe” is the “Windows Command Processor” which is the default CLI (command line interface/interpreter) of Windows (and also reactOS). By the way, it is also known as “Command Prompt”. It is the replacement of “command.com” which was relevant from MS-DOS to Windows XP. In Windows NT/Windows 2000 and Windows XP…Windows1 min readWindows1 min read
JSepulveda·1 day agoFrom Mac to Windows workstation.My Anti-Apple Background — I’ve owned a Zune HD, I owned MULTIPLE Microsoft Surfaces, and I’ve always loved the creativity the Android offered. Also, Androids were so much cheaper and easier to set up. I can remember the days when I was super excited to upgrade our family computer from XP to Vista to…Windows2 min readWindows2 min read
Jacob Pelletier·1 day agoPowerShell | An IntroductionJoin me as I embark on my journey to master Powershell. I delve into Microsoft’s own courses, read PowerShell for SysAdmins and Windows Server 2019 and PowerShell, and ask AI 🤖. What is PowerShell? Did you know that Microsoft developed a Windows PowerShell command-line shell and scripting language? It's an incredibly powerful tool…Windows4 min readWindows4 min read
Shlomi Boutnaru·2 days agoThe Windows Process Journey — runas.exe (Run As Utility)“runas.exe” is an executable aka “Run As Utility”, which is located at “%windir%\System32\runsas.exe”. On 64 bit systems there is also a 32-bit version located at “%windir%\SysWow64\runas.exe”. Overall, “runas.exe” allows a user to execute specific programs/tools with different permissions than the logged-on user. “runas.exe” also has multiple parameters that can be…Windows2 min readWindows2 min read
Michael Erickson·2 days agoConvert PowerShell (.ps1) to an Executable (.exe)When we create PowerShell Scripts or Graphical User Interfaces (GUIs) there are different ways to execute the script. We could right click the file and choose “Run with PowerShell”, or we could doubleclick it as an executable. This makes it easy to find and quicker to launch from the start…Windows4 min readWindows4 min read
